Traffic Trace Info
DumpFile: 201002241400.dump
FileSize: 2092.12MB
Id: 201002241400
StartTime: Wed Feb 24 14:00:01 2010
EndTime: Wed Feb 24 14:15:01 2010
TotalTime: 899.70 seconds
TotalCapSize: 1615.80MB CapLen: 96 bytes
# of packets: 31215482 (17640.00MB)
AvgRate: 164.48Mbps stddev:17.13M
IP flow (unique src/dst pair) Information
# of flows: 884921 (avg. 35.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.7% 2.5% 1.6% 1.5% 1.4% 1.4% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 516804
Top 10 bandwidth usage (bytes/total in %):
23.6% 5.2% 4.8% 4.7% 4.7% 3.8% 3.8% 3.0% 2.6% 2.5%
# of IPv6 addresses: 974
Top 10 bandwidth usage (bytes/total in %):
71.6% 36.4% 34.1% 7.2% 7.2% 6.0% 1.5% 1.2% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201002241400.pktlen.png)
detailed numbers
[ 32- 63]: 4863309
[ 64- 127]: 10187366
[ 128- 255]: 2279352
[ 256- 511]: 2099509
[ 512- 1023]: 770545
[ 1024- 2047]: 11015401
Protocol Breakdown
![[protocol breakdown chart]](201002241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31215482 (100.00%) 18496882445 (100.00%) 592.55
ip 31144221 ( 99.77%) 18466657533 ( 99.84%) 592.94
tcp 16459529 ( 52.73%) 10964279421 ( 59.28%) 666.14
http(s) 5501275 ( 17.62%) 7301457411 ( 39.47%) 1327.23
http(c) 4210178 ( 13.49%) 574553072 ( 3.11%) 136.47
squid 660959 ( 2.12%) 102214937 ( 0.55%) 154.65
smtp 231262 ( 0.74%) 73171812 ( 0.40%) 316.40
ftp 41833 ( 0.13%) 3818508 ( 0.02%) 91.28
pop3 27629 ( 0.09%) 16199060 ( 0.09%) 586.31
imap 317173 ( 1.02%) 455554602 ( 2.46%) 1436.30
telnet 12535 ( 0.04%) 924403 ( 0.00%) 73.75
ssh 14961 ( 0.05%) 3083588 ( 0.02%) 206.11
dns 62286 ( 0.20%) 4269901 ( 0.02%) 68.55
bgp 172 ( 0.00%) 59042 ( 0.00%) 343.27
napster 122 ( 0.00%) 55947 ( 0.00%) 458.58
realaud 9 ( 0.00%) 573 ( 0.00%) 63.67
rtsp 115172 ( 0.37%) 7058517 ( 0.04%) 61.29
icecast 24325 ( 0.08%) 16205538 ( 0.09%) 666.21
other 5239635 ( 16.79%) 2405652330 ( 13.01%) 459.13
udp 11231511 ( 35.98%) 5594531156 ( 30.25%) 498.11
dns 1114029 ( 3.57%) 165405305 ( 0.89%) 148.47
realaud 922 ( 0.00%) 60994 ( 0.00%) 66.15
halflif 81 ( 0.00%) 11695 ( 0.00%) 144.38
starcra 129 ( 0.00%) 14861 ( 0.00%) 115.20
everque 816 ( 0.00%) 95282 ( 0.00%) 116.77
unreal 36 ( 0.00%) 5343 ( 0.00%) 148.42
quake 37 ( 0.00%) 3201 ( 0.00%) 86.51
cuseeme 3 ( 0.00%) 218 ( 0.00%) 72.67
other 10115335 ( 32.40%) 5428861596 ( 29.35%) 536.70
icmp 534990 ( 1.71%) 39843228 ( 0.22%) 74.47
ipip 372 ( 0.00%) 46960 ( 0.00%) 126.24
ipsec 923525 ( 2.96%) 866751278 ( 4.69%) 938.52
ip6 1821204 ( 5.83%) 970290015 ( 5.25%) 532.77
other 173090 ( 0.55%) 30915475 ( 0.17%) 178.61
frag 2257 ( 0.01%) 1931003 ( 0.01%) 855.56
ip6 71261 ( 0.23%) 30224912 ( 0.16%) 424.14
tcp6 20356 ( 0.07%) 4539308 ( 0.02%) 223.00
http(s) 208 ( 0.00%) 276344 ( 0.00%) 1328.58
http(c) 4025 ( 0.01%) 433251 ( 0.00%) 107.64
smtp 175 ( 0.00%) 55159 ( 0.00%) 315.19
ssh 7954 ( 0.03%) 2182400 ( 0.01%) 274.38
dns 3302 ( 0.01%) 1012387 ( 0.01%) 306.60
bgp 118 ( 0.00%) 17118 ( 0.00%) 145.07
other 4574 ( 0.01%) 562649 ( 0.00%) 123.01
udp6 40410 ( 0.13%) 20450638 ( 0.11%) 506.08
dns 40166 ( 0.13%) 20416579 ( 0.11%) 508.31
other 244 ( 0.00%) 34059 ( 0.00%) 139.59
icmp6 3690 ( 0.01%) 444919 ( 0.00%) 120.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6775 ( 0.02%) 4785967 ( 0.03%) 706.42
tcpdump file: 201002241400.dump.gz (764.41 MB)